/srv/irclogs.ubuntu.com/2010/07/07/#ubuntu-server.txt

clustyoettinger: shitty beer's fault :D00:00
serverhorroroettinger:  well http://packages.ubuntu.com/search?keywords=php5 tells me that's the latest karmic version available... 5.3.2 is in lucid00:00
oettingerYes, i thought so.00:01
clustychange mirror00:01
clustymight solve the issue00:01
serverhorrorit won't00:01
oettingerCould be. I think the server uses the hosts internal mirrors00:01
p1l0tls00:01
qman__it means he's running karmic00:01
serverhorrorI know that hoster, and the mirror is in sync...00:02
p1l0toops lol using to many keyboards at once00:02
qman__if he wants 5.3 he needs to upgrade again, to lucid00:02
oettingerDo another release upgrade?00:02
qman__cat /etc/issue to verify00:02
p1l0tAGAIN00:02
oettingercat /etc/issue -> Ubuntu 9.1000:03
oettinger"Well there is your problem"00:03
p1l0tAGAIN00:03
serverhorroroettinger:  make sure everything is fine with a reboot before upgrading (uptime is overrated compared to the trouble a faulty boot config will give you especially with a hoster where you don't have any out of bands management)00:03
qman__yeah, if you didn't reboot after the upgrade, you need to00:04
* serverhorror reboots afert any and all updates00:04
serverhorrorjust to make sure...00:04
qman__you only need to reboot after kernel updates and release upgrades00:04
oettingerWill do. Thank you for you help. Will (hopefully) post my success story a bit later00:04
p1l0tafter updates too?00:04
ScottKJust kernel updates00:05
qman__and if you use uptrack, that takes kernel updates out of the equation00:05
SpamapScrap00:05
SpamapSlaunchpad is readonly now.. doh00:05
p1l0t!language | SpamapS00:05
ubottuSpamapS: Please watch your language and topic to help keep this channel family friendly.00:05
p1l0tlol00:06
SpamapSI meant carp!00:06
* SpamapS loves fish is all00:06
serverhorrorqman__:  not exatly correct. rebooting makes sure all my init scripts are fine. everything is initialized properly. /tmp (and whatnot is cleaned out properly). There isn't some rogue pxe boot server around. The BIOS config is still fine and isn't set to PXE boot. .....00:06
p1l0tI only reboot after upgrades00:07
qman__yeah00:07
serverhorrorp1l0t:  yes upgrades.... :)00:07
qman__you certainly can, but you don't need to00:07
serverhorrordid I mention I'm quite conservative regarding config changes/up[(d)|(gr)]ades :)00:07
qman__kernel updates and distribution upgrades are where you need to00:08
ScottKserverhorror: Rebooting when it's not needed is more risky than not rebooting.00:08
serverhorrorno wait. conservative isn't the right word... paranoid (too strong).....00:08
qman__my router is still running jaunty because I haven't had an opportunity for the downtime00:09
serverhorrorScottK:  why? pls explain. I want to know on the earlist occasion if something failes. And unfortunately monitoring can't catch everything00:09
p1l0tYeah some of the ancient machines I run ubuntu server on I am afriad to boot because they might turn to dust00:09
qman__uptrack certainly makes things easy00:09
ScottKserverhorror: rebooting always stresses the system and so doing it when you don't need to has risks (they are small).00:09
serverhorrorScottK:  of course there are exceptions (hot DB caches being an example)00:09
ScottKThere are also some updates that require services to be restarted, but if you subscribe to Ubuntu Security Notices (and you should), you'll know which those are.00:10
serverhorrorScottK:  accepted. But if that stuff fails, I'd rather have it fail while I have a maintenance window scheduled anyway (and expect failure) rather than at 2am. Support Contracts will fix failing hardware, but won't give me any piece of mind during night :)00:11
ScottKCertainly.00:11
ScottKIn that case it may make sense in your situation.00:12
serverhorrorfunny detail: we don't have any on-call contracts with the employer. So having things fixed (or broken) during maintenance windows is a lot better. Since stuff that is broken will stay broken and won't cause "unexpected" downtimes. (sounds harsh but I found customers react a lot better to 8h of downtime when they expect it than 5min of unexpected downtime)00:14
p1l0tCould be a month, if they expect it then its status_quo00:15
oettingerahh of course. The last run took me from 9.04 to 9.1000:16
p1l0tAGAIN00:17
oettinger:) yes yes yes. It is running.00:18
p1l0tWhen is the next one anyway Oct?00:19
p1l0tit's Oct and Apr or something right?00:19
SpamapSNever rebooting a system is a huge risk IMO. It makes one think twice about rebooting, and if you have a sudden unexpected power failure, you're stuck with systems that may not come back up in your worst crisis.00:19
SpamapSAfter hitting the "this FS hasn't been checked for X days, lets mark it dirty and fsck for 3 hours" time bomb a few times, I learned my lesson and started scheduling server restarts every 120 days.00:20
SpamapSp1l0t: next what?00:21
p1l0tNext release00:22
p1l0tYeah it's Maverick Meerkat (10.10) October 10th00:24
p1l0tIs it better to stick with LTS then to upgrade to something with an earlier EOL?00:26
SpamapSdepends on what you plan to do00:27
SpamapSThe next LTS will be out around the same time maverick is EOL00:27
oettingerSuccess! Thank you again.00:28
SpamapSMost server types would rather have a stable known platform and therefore run LTS.00:28
p1l0tThat's what I'll do at work, maybe at home I'll be risky00:29
p1l0tBecause my home server is just for messing around and learning00:29
oettingerHave a nice timeofday(/you)00:29
p1l0tYou too oettinger00:30
SpamapSyeah its a good idea to keep your "messing around box" up to date.. you'll be ready for any changes that come in the next upgrade from LTS -> LTS00:31
qman__SpamapS, that's what UPS and generators are for ;)00:33
chewbrancaany idea how to have an init script run a daemon as a specific user?00:33
p1l0tMy UPS is only good for twenty minutes :(00:33
p1l0tsudo apt-get install generator00:34
qman__haha00:34
SpamapSqman__: I refer you to livejournal's experiences with UPS and generators :)00:34
qman__where I'm at, power failures are expected00:35
qman__the electric company doesn't exactly have a good reputation00:35
SpamapSI expect every single piece of my systems to fail.00:35
p1l0tPlus UPS keeps the supply stable... This is especially important if you run a server at a machine shop where people power up whatever whenever with no warning00:36
qman__yeah00:36
=== shade\ is now known as shade}
giovanithank god NYC has reliable power01:07
=== shade} is now known as shade\
maekwhen I install from disk by hand there should be a seed file someplace correct? where is that file?01:49
giovanimaek: I don't believe one is generated01:58
maekgiovani: ok, I wasnt sure. find / -name *seed* didnt turn up anything but the docs have a good example01:59
giovanimaek: I just did the same thing to make sure there wasn't one :)01:59
maekgiovani: thanks01:59
maekI want to automate network installs. is FAI or rolling my own the only option I have?01:59
giovaniwell d-i should handle the install02:00
giovaniwhat features are you looking for?02:00
maekwell Im used to cobbler for redhat02:01
maekit lets you add a system with some info like mac and network info, what profile to use etc etc then it generates a kickstart file from a template02:01
=== shade\ is now known as toshade
maekd-i is what you use in preseeding right? debian-installer? or is that a seperate tool?02:01
giovaniah, I haven't used cobbler02:02
giovaniwe write our own pxe configs, and use kickstart at work for redhat02:02
giovaniyeah, debian-installer is for preseeding02:02
maekcobbler maybe over load. I only really have 1 kind of system to install so only 1 preseed file02:02
maekgiovani: you should check out cobbler for managing kickstarts its slick02:02
maekit manages pxe and all the dhcp entries for hosts02:03
giovanimaek: what does it buy me over plugging the machine in and sleecting which image I want in the pxe menu?02:03
giovaniI mean, dhcp is already handled -- no need to reinvent the wheel02:03
maekif you installs are that clean cut then not much, just some resuable ness in your kickstarts because they are templates02:03
maekyou can use snippets02:03
giovaniah02:04
giovaniyeah, we just use kickstart to get the machine usable and on the network02:04
giovanithen rdist out to it02:04
maekI just liked that I only had to type in 1 place to add a machine to kickstart and it did everything else02:04
giovanino point in reworking the kickstart constantly02:04
maekyeah true02:04
giovaniyeah, so cobbler is server-side handling02:05
maekso sorry to being dumb, is debian-installer a tool or just the d-i bit in the seed files02:05
maeks/to/for02:05
giovanimaek: you can use kickstart for ubuntu02:07
giovanidebian-installer is the installation tool, like anaconda for redhat02:07
maekgiovani: do I want to do that?02:07
maekgiovani: thanks02:08
giovanimaek: I don't know02:08
giovaniI don't mass-deploy ubuntu, so I'm not up on which is superior02:08
maekgiovani: I mean is it legit, can I do what I could do with preseed?02:08
giovaniI'm sure the wiki has some hints though02:08
giovaniI think preseed is the best supported method02:09
maekgiovani: makes sense.02:10
giovaniconfigs are simple02:10
=== jjohansen is now known as jjohansen-afk
twbpreseed also isn't so fugly02:19
gundehestHi, i have just installed ubuntu server and configured SAMBA, im about to copy some files over but the troughput is horrible. Its now 17KB/sec. it takes 15min to copy 12MB over :S and i have gigabit network cards in both machines.02:24
gundehestanyone awake?02:25
Mithosgundehest:  i dont know the issue with your system, but FYI: we arent always awake and will answer you when we get to it :P02:35
lifelesswin 6502:36
twbThere's no 6.5 release; they're only up to 6.102:38
MarchHairWhat's the current "best practice" for a small office (5 users) migrating to linux workstations & server (file & print)?03:19
MarchHairI'm guess CIFS for file sharing over NFS, but I'm curious about "disconnected operation." (laptops, etc.)03:20
twbEither will do if it's homogeneously unix03:23
MarchHairIs there a generally accepted method of handling the disconnects & reconnects that come with laptop use?03:26
MarchHairI'm not necessarily looking for synchronization, just a way to easily mount/umount...03:27
qman__NFS gets really hairy when the server goes down, I assume frequent disconnections would be the same03:27
qman__CIFS would be the better option there, that or sshfs/sftp03:28
MarchHairthat's what i was thinking too.03:28
qman__when my NFS server goes down unexpectedly, I have to `sudo umount -l` my directories03:29
qman__and nautilus usually crashes, requiring a reboot03:29
MarchHairI've been looking for something that can mount/umount some shares,maybe tie that into laptop suspend or something...03:30
MarchHairthinking about a workgroup or projects share, not home directories.03:31
qman__this isn't my home directory03:33
qman__nautilus just completely hangs, even if you bring the share back up03:33
qman__have to kill -9 it, and if I just launch it again, desktop icons are missing, and a few other annoying bits03:34
qman__until I reboot, or at least log off/restart X03:34
qman__in any case03:36
qman__sftp is quite a good solution there03:36
qman__if you use something like nautilus anyway03:37
qman__because you can mount your shares through the 'connect to' menu, then add them to the favorite places03:37
qman__and a simple click mounts it, clicking the eject button dismounts03:37
qman__I suppose CIFS would work the same way03:37
qman__I guess the point is, easiest depends a lot on client software03:38
MarchHairThat's a interesting idea. Don't even try to set up a "smart" script. Be dumb an let the user attach when they need to.03:38
qman__the downside to that is, at least with nautilus, I don't really understand where/how it mounts them, so you can't just interact with scripts or the command line easily03:39
qman__sort of an all-CLI or all-GUI choice to make03:39
MarchHairYup. I don't understand that either. I've gone hunting, and there's obviously some Gnome-VFS magic going on, but I can't track it down.03:40
qman__one thing when doing this, make sure each user has a unique UID/GID03:43
qman__if you just install all the systems, and add one user, they'll have the same UID03:44
qman__it won't make much difference with sftp and cifs, but if you use nfs it will03:45
qman__not sure about sshfs, probably not03:45
qman__nfs is intended to be used with networks that have directory services03:45
MarchHairyup. that's true. that's another nail in the NFS coffin. I'm trying to do this without building up a full infrastructure.03:46
giovaniqman__: are you hard or soft-mounting your NFS?03:55
giovaniI mean NFS and CIFS are horrible protocols03:56
qman__I'm not sure what the difference there is03:57
qman__it's in /etc/fstab and I'm using the kernel client03:57
giovaniqman__: if you don't specify either, then it's hard-mounted03:57
MarchHairgiovani: what would you use instead?03:57
giovanihard-mounting NFS hides the lower-level errors/disconnections from the upper layers03:57
giovanithis is helpful if you expect frequent disconnects03:58
giovanibut if you want the higher-level apps to fail properly, then soft-mounting is what you want03:58
giovaniMarchHair: AFS03:58
qman__192.168.1.8:/home/public/home/publicnfsauto0003:58
twbsoft mounting assumes the high-level app will correctly deal with the error03:58
giovanitwb: indeed03:59
giovanihe's getting nautilis hangs with hard-mounts03:59
twbYeah, well, that's it working as advertised :-)03:59
qman__it doesn't happen very often, only when the server crashes03:59
giovanitwb: heh03:59
giovaniqman__: sure03:59
qman__but it's quite annoying when it does03:59
giovaniuse a better network fs03:59
giovaniCoda, AFS, anything decent03:59
twbgiovani: a better network filesystem won't hang *nor* return an error when the backend store disappears?04:00
twbOr are you just talking about having a distributivity/caching, so it happens less often?04:00
giovanitwb: well, a better-engineered distributed network fs won't, no04:00
giovaniAFS handles caching on the client properly04:00
twbIt's no good if the file isn't already cached04:01
giovaniand with a distributed fs you're less likely to encounter the downtime in the first place04:01
giovanicaching is only one component, like I said04:01
giovaniCoda and AFS are both distributed04:02
twbDistributed in the sense that the same data is stored on multiple hosts?04:02
twbI don't remember reading about that when I looked into AFS04:02
giovanisure04:02
giovaniit's configurable04:03
giovaniCoda's better at that04:03
twbIt was more like /afs/foo.org is always stored on foo.org, and nowhere else.04:03
giovaniCoda is optimal for high-latency high-downtime links04:03
twbCoda and AFS are also harder to set up and less widely tested than NFS/CIFS, of course.04:03
twbIf this is just for a LAN, I'd recommend qman__ to instead work out why the server's crashing and fix that04:04
giovaniand yet they're much better04:04
giovaniservers crash, it's inevitable04:04
qman__it's not a regular thing04:04
twbgiovani: sure; you can either have the thing nobody likes, or the thing nobody uses :-)04:04
qman__had a NIC fail a couple months ago, etc04:04
giovanitwb: you'd be demonstrating extreme ignorance04:04
twbgiovani: yes, but if the server crashes for five minutes each year, he probably doesn't give a shit04:04
giovanito claim that "nobody uses" AFS or Coda04:04
giovanitwb: but he'd learn to use a better protocol04:05
giovaniso when he wants to implement something at work04:05
giovanihe knows something more than NFS04:05
qman__I don't have the budget for multiple servers at this point, so distributed wouldn't provide any advantages04:05
qman__but a more graceful handling when it crashes would be nice04:05
qman__one that doesn't require rebooting04:05
giovaniqman__: they have advantages besides the ability to be distributed04:05
giovaniqman__: why are you having to reboot?04:05
qman__because all of gnome gets messed up after nautilus crashes04:06
twbgiovani: it's just that you sound like a weenie04:06
qman__desktop icons missing, other weird bugs04:06
giovaniqman__: so maybe just restart X?04:06
qman__effectively the same, I still have to close all my programs04:06
giovanitwb: just someone who's used NFS, and knows it sucks, and encourages people to learn the better options out there rather than stick with an old standard04:06
qman__I still haven't rebooted since my server last crashed, about two weeks ago04:07
giovaniqman__: technically if the NFS server is brought back up, your session should be resumably04:07
giovaniresumable*04:07
* MarchHair quietly ducks under the table as the fight he innocently started kicks into high gear...04:07
qman__it hard locked, never figured out exactly why04:07
giovaniand twb, these symptoms he's describing are EXACTLY what caching prevents04:07
qman__ran zip on it and it just choked04:07
twbShrug.04:08
giovanihard locks from a network outage are a classic issue with NFS04:08
giovaniwe've probably lost countless dollars to them at work04:08
giovanijust saying, when you use NFS in the real world, this stuff bites you in the ass04:09
qman__giovani, it usually takes a few hours to bring the server back up, since if it crashes, it's configured to fsck the RAID, and if it's a hardware failure, well04:09
giovaniqman__: yikes -- do you know what the cause of the crashes has been?04:10
twbqman__: buy a UPS04:10
giovanieven if they're infrequent04:10
qman__the most recent one, no idea04:10
qman__I have a UPS04:10
giovania UPS?04:10
qman__it'll last about an hour and a half04:10
giovanihow does that prevent server crashes?04:10
twbOh, you mean a software crash04:10
qman__yes04:10
twbWhat the fuck are you running on your NFS server that it EVER crashes?04:10
giovaniwell if it's his home network, presumably if he lost power, his desktop would also lose power04:10
qman__the one before that, the NIC failed and I had to shut it down and replace, forgot to umount my filesystem first04:10
giovaniso he wouldn't care04:10
twbgiovani: not if it was a laptop :-)04:11
giovanipresumably :)04:11
qman__I've got a UPS on that too04:11
giovanigood point04:11
qman__my network stays up when the power goes out :)04:11
giovaniNFS home directory on a laptop doesn't sound like a good idea04:11
giovanikind of defeats the purpose of it being a laptop :)04:11
qman__pretty much everything else just uses CIFS, it just wasn't adequate for this desktop04:12
qman__lots of lag trying to load music files04:12
twbThat shouldn't happen04:12
giovaniwhat's the CIFS server?04:12
giovanisamba?04:12
qman__yes04:12
giovaniwell there's your problem ;)04:13
twbYeah, is this NAS running Ubuntu LTS?04:13
qman__and windows clients have no issues using it04:13
qman__yeah, 10.04 now04:13
giovanisamba is junk04:13
giovanisorry to say04:13
qman__had to upgrade from hardy because my replacement NIC didn't have drivers04:13
twbqman__: I'm in that position; it's fucking me up because I have to port all this in-house juju to 10.04isms04:14
qman__it had been running great until that NIC failed04:14
qman__almost a year of uptime04:14
giovanibut a NIC failure shouldn't have required an unclean shutdown and therefore a fsck04:14
twbNod.04:15
qman__no, but I had to order one04:15
qman__took a week to get here04:15
giovaniwhat were the issues that caused unclean shutdowns?04:15
qman__I have lots of spare PCI NICs, but it didn't have any free PCI slots04:15
qman__haven't figured it out yet04:15
qman__I ran 'zip' on the server04:15
qman__and it just choked, out of the blue04:15
giovanihmm04:15
giovanidisk failure?04:15
giovanifilesystem failure?04:16
giovaniwhat fs are you using?04:16
qman__disks are all good, filesystem checked clean04:16
qman__ext304:16
giovaniI'm wearing of filesystem checks04:16
giovaniweary*04:16
twbgiovani: switch to btrfs, then, where they're not supported04:16
giovaniyou still have the logs?04:16
qman__SMART is happy, mdstat is happy04:16
qman__there was nothing logged04:17
giovanitwb: we're evaling btrfs actually04:17
giovaniqman__: nothing?04:17
giovanino oom?04:17
qman__like it never crashed04:17
giovanino watchdog?04:17
giovaniouch04:17
qman__I don't know if there's anything special I can configure to help it04:17
giovaniserial console :)04:17
qman__but it was so far gone there was no kernel panic messages on screen, sysrq commands did nothing04:17
giovanisounds hardware-related then04:18
giovaniif the kernel doesn't panic but sysrq is no good, 90% chance it was hardware04:18
qman__not good news, but good to know anyway04:18
giovanionly a few things could cause that04:19
giovaniCPU/Motherboard/RAM04:19
giovanirun some burn-in tests04:19
qman__it's been operating hiccup free since then04:19
qman__of any of them, I suspect the motherboard04:19
giovaniwho made it?04:19
qman__but it's all DDR equipment, old hat04:19
qman__if it failed I'd replace all three04:20
qman__foxconn04:20
giovaniah04:20
giovaniyeah, cheap taiwan stuff04:20
qman__guess that one goes to the top of the 'to-buy' list04:20
giovaniI personally prefer Intel04:21
giovanifor my home systems that don't need something fancy04:21
giovanievery Intel board I've used has been rock-solid04:21
giovanibut they're never on the cutting-edge04:21
qman__I'm a bit of an AMD fanboy04:21
qman__I'll probably buy a gigabyte board, though04:22
giovaniyou must be hurtign then :)04:22
giovanisince AMD's market share is dropping like a stone04:22
qman__it needs an upgrade anyway, it's a single core 2.2GHz, 4x512MB in it04:23
giovanisounds more than adaquate for a home server04:23
twbThat's faster than most of my machines put together04:23
twbMy home server is a 16MB/32MB 200MHz MIPS system.04:24
giovaniheh04:24
giovaniNFS hosted on that? ;)04:24
Hilikushey guys04:25
Hilikusi have a web server at home04:25
Hilikusthat i am trying to access. but i can't seem to find a way to access it through the same name both from within the network and from outside the network04:26
Hilikusi have a dynip domain that works when i'm not at home, but from home i never works04:26
giovanian internal DNS server is usually the solution04:26
qman__well, if you want to access it by any name from outside the network, you need to register a name04:26
qman__oh, I see04:27
Hilikusqman__: i already have a name04:27
qman__the problem is your router04:27
qman__by default, they will not route packets back into the network04:27
Hilikusqman__: but how come i use the machines actual name and i do access it from within the network04:28
qman__so, you'd need to either configure it to do that (bad idea security wise) or set up an internal DNS to answer that query as a local IP instead of your external IP04:28
Hilikuswouldn that count as routing packets back?04:28
MarchHairisn't there a redirect feature that some routers use?04:28
qman__no, because when you use the internal name, it gives you the internal IP04:28
twbgiovani: no, but HTTP and sshfs is04:28
Hilikusi see04:28
MarchHairLAN-side requests for the WAN/DMZ IP get icmp-redirected back to the LAN ip04:28
qman__when you use the internet name, it gives the external IP04:28
Hilikushow i have a setup a dns server04:28
qman__and your router is not routing traffic back to the server04:29
twbThe files themselves wouldn't fit into the 16MB of nonvolatile memory; it has a USB key hanging out the back04:29
Hilikusis a dns server with pretty much no traffic heavy to run?04:29
qman__not at all04:29
Hilikusmemory and cpu-wise04:29
twbHilikus: do you mean a local DNS cache of the internet's A records, or do you mean hosting your own A record for the internet to get?04:30
qman__I use BIND because that's what I know, but you probably want dnsmasq04:30
MarchHairHilikus: what router do you use? See if it supports icmp-redirect.04:30
Hilikusin my laptop i had to come come up with a script that altered /etc/hosts depending if the SSID was my home's or not04:30
Hilikusbut now with my phone i can't do that04:30
Hilikustwd i have no idea, don't know much about dns04:31
Hilikusi just want to be able to use the same name to access my server from the lan and wan, because i have bookmarks, settings and stuff like that that have the name of the server stored, so when i go out and try to access it they don't work04:32
twbHilikus: why not just use split-horizon DNS for the router's A record?04:32
qman__well, if your router supports it, the icmp-redirect will be the easiest04:32
twbSorry, bad completion04:32
twbMarchHair: why not just use split-horizon DNS for the router's A record?04:32
Hilikusqman__: didn't you say that would be dangerous or you were talking about something else?04:33
qman__something else04:33
HilikusMarchHair: my router is pretty crappy, but i'll look04:33
MarchHairtwb: if he's using something like hilikus.dyndns.org, would split-horizon make the rest of dyndns.org unaccessible from inside the LAN?04:33
twbMarchHair: I don't believe so; you'd only be splitting hilikus.dyndns.org, not the parent domain04:34
qman__even what I was thinking of is not inherently dangerous, it just goes against the damage-control ideal should you get a malicious user or program on your network04:34
MarchHairtwb: you can do that without being authoritative for the parent? cool. gonna go look.04:34
twbMarchHair: I don't know.04:34
Hilikusso the three options i have is either to run a dns server, to configure icmp-redirect and this split-horizon thing?04:35
twb$coworker won't let me do any significant split-horizoning due to him being a fuddy duddy04:35
twbHilikus: they all require your router to not be shit04:35
twbFSVO router = dhcp/dns server04:35
giovani uhm04:35
giovanino, if he has internal DNS resolve the external name to an internal IP04:35
Hilikustwb running a dns server would work anyway, no?04:35
giovanihis router doesn't need anything special04:36
MarchHairtwb, hilikus: just read. yeah. split-horizon will do the trick too.04:36
twbdnsmasq has a nice option for split-horizon where it'll just magically work out the Right Thing based on interfaces and the requestor's IP and the list of A records in /etc/hosts04:36
MarchHairsounds like the split-horizon dns is a good option.04:37
twbCan't find the option now, though :-/04:39
twbAh, localise-queries04:40
twbDoesn't work for IPv604:40
MarchHairtwb: what does? IPv6 support needs to hurry up.04:41
twbMarchHair: dnsmasq's split-horizon (--localise-queries) is IPv4 only at present.04:42
qman__I wouldn't be surprised if I'm telling that to my grandchildren04:42
twbqman__: tell me about it :-/04:42
Lord_DeviIf a person were to modify /etc/init/samba.conf to tweak samba's initialization, could I expect updates to samba to over ride my alterations? Or would my customized /etc/init/samba.conf file be in danger of being overwritten?04:42
Lord_Devierrr would it NOT be in danger rather.04:42
qman__Lord_Devi, all the times I have run into that, it asked me what to do04:43
MarchHairqman__: yup, as we all huddle around fires talking about how the CIDR block shortage has returned us to the stone age....04:43
qman__of course, those were during release upgrades04:43
Lord_DeviHrm, yeah ok04:45
MarchHairwell, this samba.conf is the StartUpManager conf. How's that tagged in the package?04:45
Lord_DeviMarchHair: If that's in reference to my question, I don't understand what you mean.04:46
MarchHairLord_Devi: in the samba package, /etc/init/smbd.conf can be marked as a config file. If it is, it won't be overwritten at all, because you can "config" it.04:47
MarchHairif not, it can be overwritten, but apt/dpkg should be smart enough to ask you before doing that.04:47
Lord_DeviOh ok! I see. I didn't know that.04:47
Lord_DeviIs there a way I can check? That would be a handy skill for me to know..04:47
=== KenjiP0p is now known as KenjiP0p|away
MarchHairLord_Devi: I'm sure there is, but I don't know it off the top of my head.04:52
=== KenjiP0p|away is now known as KenjiP0p
Lord_DeviWell still very helpful information. Thanks March04:52
MarchHairNP. I hate to RTFM you, but that's all I can suggest right now. Maybe one of the man pages says how...04:53
qman__there most definitely is, but I don't know it04:57
qman__check the apt-cache manual, I think that's the base command for it04:57
qman__might be a dpkg command too04:58
MarchHairi thnk dpkg-query has some clues05:03
MarchHairlooks like [ dpkg-query -W -f='${Conffiles}' samba ] will probably list the conffiles.05:04
MarchHairyup. that works.05:08
Lord_DeviHrmmm!! Very cool! Ok thanks March!!05:09
Lord_DeviVery very handy05:10
Lord_DeviI'm taking note of that for sure05:10
=== v is now known as vorian
Hilikusso from what i'm reading it souynds like split horizon would do what i need, but i can't find info on how to set it up05:17
Hilikusis there an ubuntu guide for it?05:17
Lord_DeviSheesh. Never heard of that before... As if DNS wasn't complicated enough! let's have different tables for different request sources! lol... oh yay, sounds like fun05:20
Hilikusi know05:20
Lord_DeviI'm curious Hilikus, what's the scenario that has you interested in such functionality?05:21
Hilikusi want to access my server with the same name from inside and outside the network05:21
Hilikusright now i have to use different names based on where i am05:21
Lord_DeviHrmm!! Yes yes..I can see that.05:21
Hilikusbut its annoying for apps that store the server name05:22
Lord_DeviRoaming users are always such a nuisance. ;)05:22
Hilikushahaha05:22
Lord_DeviSorry I can't be helpful though. Sounds interesting however, I might have to look into that myself..05:22
Lord_DeviI have an application here hardcoded to be available on localhost:8080, but i wish to make it available to 0.0.0.0:8080. How can I achieve this with iptables? I am told NAT does not work for this usage.(Nor could I get it to myself) but maybe redirect can? (Still no luck from my own sloppy attempts)05:29
twbYou can't.05:30
twbMaybe socat would work.05:30
MarchHairwhat if you changed the port? Map 0.0.0.0:9090 to 127.0.0.1:8080?05:31
twbI don't think you can DNAT to the loopback interface, no matter how hard you try.05:32
twbFeel free to prove me wrong05:32
Lord_Devitwb: That's what I was told by some other fellows. A few seemed to think REDIRECT would work though05:32
twbOh, yeah, that looks like it would work05:33
Lord_DeviAny idea HOW? lol05:33
Lord_DeviI'm googling, but the examples I'm getting are mostly from port to port, not interface to interface so to speak..05:33
twbWell, *nat -A POSTROUTING -i isp+ -p tcp --dport 8080 -j REDIRECT --to-port 808005:34
Lord_DeviActually frustrating enough, most google replies are still telling me about DNATTING :P I'd search for NAT if I wanted that! I want redirect! Damn google..05:34
twbLord_Devi: so add a -DNAT to the query05:34
Lord_DeviYeah you're right =) I could be more finesseful with my googlefu I suppose. Thanks for the pointer though, that'll help my searches a bit..05:35
Hilikustwd so for split-horizon do i still need to have a dns server running and have the router use it?05:36
Hilikustwb, sorry05:36
twbsplit-horizon is a feature/property of a DNS server, so it requires a DNS server.05:37
Hilikusok05:38
twbReally you could fake it by just hard-coding the IP of the inward-facing interface of your router/whatever in /etc/hosts on your local machines.05:38
Hilikusi did that, the problem is when i move the laptop of phone outside the network the hardcoded ips don't work anymore05:38
Hilikusor phone*05:38
twbRight05:39
twbSo add it to the set of A records that your DNS server exports to the local network05:39
twbThat's effectively split, because OUTSIDE the LAN, there's a different A record hosted on dyndns or whatever05:40
Hilikushmmm. i dont know much of DNS. any links i can read, or queries to search for doing this export you're saying?05:41
twbGiven you're dealing with a shitty appliance router, knowing what's going on wont help05:43
twbYou need to go into its stupid web UI and look for a place to add hostname-to-IP mappings05:44
MarchHairI'm out for the night. Good luck, Hilikus.05:45
Hilikusit does have a DNS setting, i thought telling it to use my server instead of the ISP dns server would do it05:45
Hilikusthanks MarchHair , good night05:45
Hilikuswell, at least do part of it05:45
MarchHairthanks to the rest of the room for hits on my file server woes. it was a help.05:46
twbHilikus: yeah, you could do that05:47
Hilikusall i see is setting fixed ips instead of dhcp, nothing to map hostnames to IPs05:48
uvirtbotNew bug: #602540 in openldap (main) ""ldapadduser" adds the user and hangs" [Undecided,New] https://launchpad.net/bugs/60254005:50
twbalvin: hey, I just had a fucking clever idea06:23
twbalvin: add nolock to /home's options in fstab, then add a mountall-lock.conf job that starts when rpc.statd is ready, and simply runs "mount -oremount,lock /home"06:24
Hilikusguys, i'm trying to bind mysql to 192.168.0.100 but when i change the config file it doesn't start at all saying that port 3306 is used. if i change it to 127.0.0.1 it works06:26
Hilikuscould it be that apparmor is blocking the daemon from binding the network address?06:26
sbeattieHilikus: if it is, you'd see rejections in /var/log/kern.log06:28
sbeattieHilikus: you should look at the output of 'sudo netstat -nltp" to confirm that there's nothing existing listening on 192.168.0.100:330606:29
Hilikusi'll try that, thanks sbeattie06:45
MakXanyone familiar with DAS, NAS, SAN?07:13
=== freeflyi1g is now known as freeflying
rahmanHi, something wrong with squid_db_auth. I get this: DBI::db=HASH(0x1bcffe8)->disconnect invalidates 1 active statement handle (either destroy statement handles or call finish on them before disconnecting) at /usr/local/squid/libexec/squid_db_auth line 97, <> line 1.08:05
rahmanAnd it gives ERR login failure08:05
rahmanI modified the squid_db_auth script so it writes the password comparison to console. And I see they match08:06
rahmanSo why it gives login error?08:07
lauI am trying to create an ec2 ami from a running lucid server machine08:23
lausudo ec2-bundle-vol -d /mnt/ -c ???.pem -k ???.pem -u ??? -s 1536 --no-inherit08:23
laubut the command fails when rsyncing08:23
lauis it possible to create an ami from a ubuntu server machine that is not already an ami ?08:24
=== taneli is now known as xampart
=== KenjiP0p is now known as KenjiP0p|away
=== KenjiP0p|away is now known as KenjiP0p
RudyValenciaI just transplanted components from my old server into a new server and Ubuntu isn't recognizing the Ethernet onboard.08:59
RudyValencia(I don't get an eth0 when I type in 'ifconfig'09:00
RudyValenciait's recognized by lspci, but I get no network interface...09:00
RudyValencia...why?09:00
Jeeves_RudyValencia: What kind of interface is it?09:00
RudyValenciaIntel 82557/8/9/1 PRO/100 Ethernet (rev 10)09:01
RudyValenciaSomething like that anyway09:02
RudyValenciaI'm switching between the desktop and server via KVM so I can't exactly copy anything09:02
Jeeves_And if you type ifconfig -a ?09:02
RudyValenciathere's an eth109:02
RudyValenciaand lo09:03
Jeeves_Than that's the one09:03
RudyValenciaHow do I change it to eth0?09:03
Jeeves_edit /etc/udev/rules.d/70-persistant-net09:03
Jeeves_That's where the interfaces are mapped09:03
RudyValenciaIs there a way to 'redetect' the interfaces?09:04
RudyValencialike a command I can run?09:04
RudyValenciaI guess I just remove the old line for the prior server's Ethernet adapter and alter the eth1 to eth0?09:05
RudyValenciaright?09:05
Jeeves_Right!09:05
Jeeves_(seriously :))09:05
RudyValenciaAnything else I should alter?09:05
Jeeves_Nope, if you reboot now, you should have an eth0 again09:06
Jeeves_btw, you can see this by reading the dmesg output09:06
Jeeves_it says something about 'renaming interface' or zo09:06
Jeeves_so09:06
RudyValenciaI don't know09:07
Jeeves_You don't know what?09:07
RudyValenciabut anyway, is there anything else that should be changed as a result of the transplant?09:07
RudyValenciaThat's what I was saying "I don't know" about09:08
RudyValenciaas in, I don't know if there's anything else needing alteration09:08
Jeeves_Nope, probably not.09:08
Jeeves_Not that I know of, at least :)09:08
RudyValenciaEverything else seems OK09:09
RudyValenciaTime to RMA the old server09:09
SnadderAnyone know if EUC will store the virtual machine state on both the node and the frontend?..09:10
RudyValenciaThis new server is *much* quieter.09:10
RudyValenciaThe old one was a generic motherboard in a server case.09:10
RudyValenciaThis is a Dell Optiplex repurposed to be09:10
RudyValencia+a server09:10
SnadderWondring what happens with the virtual machines running when I remove a pysical server from EUC..09:11
Roxyhart08hi there, i need to try to configurate a application that use the file net on gentoo and do it on ubuntu. Somebody know which is the equivalente "net" file of gentoo in ubuntu?09:16
joschiRoxyhart08: what "net" file do you mean? /etc/conf.d/net? the equivalent in debian/ubuntu would be /etc/network/interfaces09:19
Roxyhart08tahnks joschi...just wondering in this file there are some configuration about vlans and sme format like config_vlan10 = ... , i am not sure if we can configurate this kind of things in interfaces?09:21
joschiRoxyhart08: it's the right file for vlan configuration. install the package `vlan` (http://packages.ubuntu.com/lucid/vlan) and read its documentation09:23
Jeeves_kirkland: Awake?09:26
Roxyhart08thanks joshi09:31
=== KenjiP0p is now known as KenjiP0p|away
gundehestHi, i have just installed ubuntu server and configured SAMBA, im about to copy some files over but the troughput is horrible. Its now 17KB/sec. it takes 15min to copy 12MB over :S and i have gigabit network cards in both machines.10:24
gundehestAnd PHP dont work after my LAMP setup, it just show blank pages when i browse to the server10:25
=== KenjiP0p|away is now known as KenjiP0p
Roxyhart08hi there i download lucid server but it cant't start with my dvd/cd lector to install...i tried in different machines, somebody know if i need to do something else?10:42
Jordan_URoxyhart08: Did you burn the iso as a disk image or did you just put the iso as a file on a CD?10:42
Roxyhart08as image?10:43
Roxyhart08i will chek it again ...thanks10:43
=== KenjiP0p is now known as KenjiP0p|away
qman__bad downloads and burns happen too, check the md5sum of the CD against the one given on the mirrors10:47
Roxyhart08ok, i will tahnks a lot!10:48
falktxhi, I need some help restricting IPs on tomcat10:59
falktxanyone?10:59
RoyKfalktx: try #tomcat - probably easier to get an answer there11:09
falktxoh, lol, thanks11:11
uvirtbotNew bug: #602620 in mysql-dfsg-5.1 (main) "can't login to mysql server, seems is down" [Undecided,New] https://launchpad.net/bugs/60262011:11
kirklandJeeves_: hi11:48
Jeeves_kirkland: Hi, I was wondering if you know where the fix of https://bugs.launchpad.net/ubuntu/+source/multipath-tools/+bug/571093 is12:19
uvirtbotLaunchpad bug 571093 in libvirt "[SRU] multipath + libvirtd eats away more memory over time" [Medium,In progress]12:19
Jeeves_I can't find an updated version of libvirt-bin in proposed12:19
alvinWhat is the name of the Ubuntu-server installer?12:42
Jeeves_alvin: ?12:43
alvinI want to report a bug against the Lucid installer and I need to know the project/package12:44
alvinLooks like a papercut. /etc/fstab no longer contains a cdrom entry.12:45
alvin(only on fresh installs. Upgrades do not lose the cdrom entry)12:49
Jeeves_https://wiki.ubuntu.com/Bugs/FindRightPackage#When%20installing%20Ubuntu%20%28or%20Derivatives%2912:50
alvinJeeves_: thanks. Looks like it is debian-installer12:50
Jeeves_Jups12:51
uvirtbotNew bug: #602689 in php5 (main) "Segmentation fault in libapache2-mod-php5 when calling methods" [Undecided,New] https://launchpad.net/bugs/60268913:21
bogeyd6http://packages.ubuntu.com/lucid-backports/  is not a valid url13:42
sommermorning all13:45
hackeron_hey, how do I stop grub from showing the menu on failed boot?13:52
a_okIs there some documentation on Iscsi(diskless) booting? The installation runs fine but booting gives me an error: ipconfig eth0 SIOCGIFINDEX no such device14:02
Jeeves_a_ok: Seems like you NIC wasn't found14:07
a_okJeeves_: looks like it but I have no idea how to be sure this is the case. I am using an intel Gigabit ET quad nic. quite common14:08
a_okJeeves_: does this mean that the setup just ignores NIC's when building the initrd?14:11
a_okJeeves_: what stuff do I need in the initrd to get it going?14:13
a_okand how am I going to get in in the initrd. Last time I tried makeing an Image manually (using cpio) it did not see it as a valid image14:14
Jeeves_a_ok: The intelnic should be fine14:16
Jeeves_strange14:17
a_okJeeves_: if it is not the lack of drivers the iSCSI boot procedure does not work14:20
Jeeves_a_ok: I don't know. I have never tested that14:22
a_okIs there anyone who has done a succesfull iscsi boot with ubuntu 10.4?14:24
Jeeves_w14:28
Jeeves_sorry14:29
uvirtbotNew bug: #602734 in chkrootkit (main) "ifpromisc reports PACKET SNIFFER for /usr/sbin/dhcpd3" [Undecided,New] https://launchpad.net/bugs/60273414:31
sommerI'm having a problem with postfix... I can relay messages on the local LAN, but they're rejected by the internets google, yahoo, etc14:32
sommermy thought is something with DNS, but messages to through fine... using Google domain for main mail14:33
hallynkirkland: bug 601100  is the lxc sync request14:33
uvirtbotLaunchpad bug 601100 in lxc "sync lxc 0.7.1-1" [Undecided,New] https://launchpad.net/bugs/60110014:33
sommeranyone mind if I try sending a message to their domain?14:34
sommeror help me troubleshoot :-)14:34
a_okJeeves_: yeah I just confirmed it the igb.ko module is in the initrd14:36
a_okimage14:36
DrPoOwhat are your suggestions regarding the automatic updating of an Ubuntu server? Should I simply add an aptitude safe-updrade to the roots crontab?14:37
hallynsommer: if you're just asking for somepalce to send mail to, i'm game14:37
sommerhallyn: awesome thanks, what address should I send to?14:38
Jeeves_sommer: mark@prevented.net14:42
sommerJeeves_: thanks sent a test14:46
sommerJul  7 09:53:54 IS postfix/smtp[29263]: connect to mx1.tuxis.nl[213.136.13.201]:25: Connection refused14:54
sommerJul  7 09:53:54 IS postfix/smtp[29263]: connect to mx2.tuxis.nl[89.31.102.126]:25: Connection refused14:54
sommerJul  7 09:53:54 IS postfix/smtp[29263]: 0980B12C2E1: to=<mark@prevented.net>, relay=none, delay=456, delays=456/0.01/0/0, dsn=4.4.1, status=deferred (connect to mx2.tuxis.nl[89.31.102.126]:25: Connection refused)14:54
=== rgreening_ is now known as rgreening
=== rgreening is now known as rgreening_
=== rgreening_ is now known as rgreening
Jeeves_sommer: You're being firewalled15:00
sommerjeeves_: because of DNS?15:01
Jeeves_sommer: I'm not firewalling you15:01
sommerJeeves_: I have  subdomain MX for the host I'm trying to send through, but maybe it's not configured correctly15:01
Jeeves_Your router, or your ISP, is firewalling you15:02
sommermmmmm, I'll check that15:02
=== Mithos is now known as EvilTrek
kirklandhallyn: done ;-)15:04
hallynkirkland: thanks!15:05
Jeeves_kirkland: Do you have any clue on the libvirt bug?15:06
kirklandJeeves_: there's only one bug against libvirt?  :-P15:06
Jeeves_13:19 < Jeeves_> kirkland: Hi, I was wondering if you know where the fix of https://bugs.launchpad.net/ubuntu/+source/multipath-tools/+bug/571093 is15:07
uvirtbotLaunchpad bug 571093 in libvirt "[SRU] multipath + libvirtd eats away more memory over time" [Medium,In progress]15:07
Jeeves_I can't find a new version in -proposed15:07
sommerJeeves_: thanks for the help... totally forgot firewall was blocking smtp for all but some hosts, doh15:09
kirklandJeeves_: I'm going to have to assign hallyn to this bug15:10
kirklandJeeves_: oh wait15:10
kirklandJeeves_: i see, it's a mistake15:11
smoserkirkland, is this right:15:15
smoserhttp://paste.ubuntu.com/460234/15:15
smosers/right/expected/15:15
smoseri'm confused by option '2'15:15
kirklandsmoser: hmm, yeah me too15:16
kirklandsmoser: byobu -v ?15:16
kirklandsmoser: definitely a bug...15:16
smoserbyobu version 2.8115:16
smoserScreen version 4.00.03jw4 (FAU) 2-May-0615:16
kirklandsmoser: okay, i think i know what introduced it15:16
kirklandsmoser: i started naming sessions "byobu"15:16
kirklandsmoser: to make screen and byobu cohabitate better15:16
Jeeves_sommer: You're welcome15:17
kirklandsmoser: please file a bug, i'll get it fixed asap15:17
Jeeves_kirkland: What is a mistake?15:17
kirklandJeeves_: that it didn't get re-uploaded15:17
kirklandJeeves_: thanks for the reminder, i'm on it now15:17
smoserkirkland, i also find it strange / wrong that if i ctrl-C byobu-launcher i am placed into one of the sessions.15:20
kirklandJeeves_: uploaded, awaiting acceptance in -proposed15:21
kirklandsmoser: yeah, file a bug on that too -- you're not the first to say that, but no one has filed a damn bug on it :-)15:21
kirklandsmoser: okay, i see the bug15:24
kirklandsmoser: i'll upload a fix15:24
Davieykirkland, I noticed it aswell.. but thought it was intended behaviour :)15:24
|eagles0513875|i installed ubuntu server on my internet connection at home on this workstation when i took it back to work and getting our internet connectionf or it today the network card for some reason doesnt want to connect to the internet .15:25
|eagles0513875|hardware in this machine hasnt changed any ideas15:25
=== cypher is now known as Guest1729
smoserbug 602750 and bug 60275315:27
uvirtbotLaunchpad bug 602750 in byobu "byobu-launcher lists empty option " [Undecided,New] https://launchpad.net/bugs/60275015:27
uvirtbotLaunchpad bug 602753 in byobu "byobu-launcher should exit 'none' on user ctrl-c" [Undecided,New] https://launchpad.net/bugs/60275315:27
kirklandsmoser: thanks man15:27
Jeeves_kirkland: Thanks!15:29
kirklandJeeves_: no prob, thanks for the reminder15:31
Jeeves_yw15:32
alvin|eagles0513875|: What network card?15:35
Jeeves_|eagles0513875|: Did you statically configure an ip address?15:36
hallynkirkland: damnit, my qemu-within-kvm boot problem turns out to be the libvirt+bios bug where libvirt puts 'boot=on' at the end of an ide drive define and that makes the bios not boot it15:36
hallyn(bug 591423 that is)15:38
uvirtbotLaunchpad bug 591423 in libvirt "qemu -drive boot=on flag causes boot to hang." [Low,Incomplete] https://launchpad.net/bugs/59142315:38
kirklandhallyn: ah15:46
hallynkirkland: basically, https://bugzilla.redhat.com/show_bug.cgi?id=57934815:51
uvirtbotbugzilla.redhat.com bug 579348 in qemu "libvirt: kvm disk error after first stage install of Win2K or WinXP" [High,New]15:51
a_okJeeves_: what is the best way for me to solve this iscsi boot problem?16:12
a_okI mean should I file a bug report or something? can I parse sertain options to the kernel? or is there any documentation on the boot process that might help me pinpoint the problem?16:15
Jeeves_a_ok: Sorry, I don't know.16:18
a_okJeeves_: thanks anyway16:19
Krazyderekis it possible to install windows on a KVM on a headless / commandline ubuntu server?16:30
Krazyderekdo i have to load the gui to do that?16:30
Kaffienhow can i determine the UUID of a specific partition?16:42
Jeeves_blkid /dev/disk16:42
hggdh!seen mathiaz17:00
ubottuI have no seen command17:00
hggdhoh17:00
=== [1]Kaffien is now known as Kaffien
=== [1]Kaffien is now known as Kaffien
=== [1]Kaffien is now known as Kaffien
mathiazjiboumans: hi!18:36
jiboumanshey18:36
jiboumansthere you are :)18:36
jiboumansi have a call running overtime, ping you asap18:36
jiboumansmathiaz: ^18:36
mathiazjiboumans: ok - np18:37
=== [1]Kaffien is now known as Kaffien
hggdhOK. Deutschland ueber alles, the game will start in a few :-)18:41
mathiazSpamapS: hi - have you heard of https://labs.omniti.com/trac/reconnoiter?18:47
SpamapSmathiaz: reading, I had not.. but I have worked with OmniTI for a long time, they're awesome..18:48
mathiazSpamapS: right - is this the folks that gave the first workshop at Velocity?18:48
SpamapSmathiaz: no, they're at http://watchingwebsites.com/18:50
mathiazSpamapS: ah ok18:50
mathiazSpamapS: one omniTI guy also gave a workshop at velocity18:50
SpamapSmathiaz: yeah, thats Theo, he started the company18:51
SpamapSmathiaz: Careercast, who became Adicio later, was one of his earlier clients.18:51
SpamapShttps://labs.omniti.com/trac/reconnoiter/browser/docs/assets/noit-network-arch.png18:51
SpamapSgreat pic ;)18:51
SpamapSmathiaz: this space seems to be exploding18:52
SpamapSmathiaz: btw I am talking with some guys I met at devops days who are switching from munin -> collectd18:52
SpamapSmathiaz: munin can't scale beyond 100 servers because of its polling infrastructure18:53
hggdhmathiaz: would you mind creating another branch (uec-testing-preseeds) under uec-testing-script-dev? I cannot find how to do it18:53
* mathiaz nods18:53
hggdhmathiaz: and there is an important change in maverick d-i that hit us18:53
mathiazhggdh: hm - you should be able to just push a new branch18:54
mathiazhggdh: you're part of the ~uec-testing-scripts-dev LP team18:54
SpamapSmathiaz: the one thing I *don't* like about Reconnoiter is it looks like they're trying to make yet another "everything to everyone" tool instead of something that can easily be plugged into other things.18:54
hggdhmathiaz: K, will do it18:55
mathiazhggdh: bzr push lp:~uec-testing-scripts-dev/uec-testing-scripts/name-of-the-new-branch18:55
hggdhmathiaz: THANK YOU. bzr is, still, partially misterious to me18:55
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
sorenmathiaz: Hey, man.19:28
sorenmathiaz: Do you know of a package that uses openldap for its datastore and somehow manages to set it up automatically? I'm needing to do something like that, and I'm looking for prior art.19:28
maekI have a single package im trying to automate the installation of but it asks 1 question, how do I provide an answer for that?19:51
smosermaek, debconf-set-selections19:51
maeksmoser: how do I know what the name of the question is?19:53
smoserlook in /var/lib/dpkg/info/<package>.templates19:54
maeksmoser: thanks, so id do debconf chef/chef_server_url mystring19:55
maekis there a way to tell if a .deb is going to ask questions with out installing it manually?19:56
smosernot a fool proof one that i know of.19:57
smoserbut possibly /var/lib/dpkg/info/<package>.postinst has19:57
smosercalls to db_input19:57
smoserwith a priority as the first arg, then, you'll be prompted for that if you have priority set lower or equal to the listed value19:58
maekyou lost me there, where can I read about priority?19:59
mathiazsoren: hi20:23
mathiazsoren: try to look at  lp:~asommer/openldap-dit/openldap-dit-split20:23
mathiazsoren: it's not a package20:23
mathiazsoren: but has some ideas about how to integrate with the new cn=config stuff20:24
rbergerUsing UEC, is there really no way to specify the /dev/sdx device of an EBS Mount? It seems you have to manually figure out which device the instance magically chose by grepping dmesg. Is this really true? It makes it hard to automate.20:36
rbergerec2-describe-volumes says something like unknown,requested:/dev/sdb but it doesn't mean that its attached to /dev/sdb20:37
=== shade_ is now known as shade\
sorenmathiaz: Ok, thanks!20:50
sorenmathiaz: That's based on Andreas' work, isn't it?20:50
mathiazsoren: the key part is to use "-Y EXTERNAL -H ldapi:///"20:50
mathiazsoren: yes - for the dit20:51
mathiazsoren: if you use the option below to call ldap* commands you will have access to the whole tree20:51
mathiazsoren: if run as root20:51
sorenmathiaz: Oh! That looks very interesting.20:52
mathiazsoren: right - that's the whole point of slapd+cn=config20:52
mathiazsoren: you don't need to have a "root" account in ldap with a specific password20:53
mathiazsoren: with proper ACLs you can grant access to root (uid=0) to the whole tree20:53
mathiazsoren: and do whathever you want20:53
mathiazsoren: have a look at the acl on the cn=config tree20:53
mathiazsoren: it grants full access to cn=config to root (uid=0) using peercred=sasl20:54
mathiazsoren: (or something like that)20:54
Kaffienwhy did  ubuntu-server start using  UUID in the fstab?20:54
Kaffienim just kind of confused20:54
sorenKaffien: Because device names aren't deterministic.20:54
Kaffienusually /dev/sda  is the device it was yesterday20:55
Kaffienand teh day before20:55
Kaffienand month before ....20:55
sorenOn your system.20:55
sorenIt was a considreable effort. It wasn't just for fun :)20:56
Kaffiengive me an example in which this becomes necisssary20:56
soren/dev/sdb and /dev/sda might change plances.20:56
sorenplaces.20:56
sorenMaybe you switch cables around, maybe it just happens, because the kernel discovers things in a non-deterministic order.20:57
sorenMaybe you insert an extra partition so that /dev/sda3 suddenly becomes /dev/sda4.20:57
sorenthere's tons of things that could happen.20:57
sorenThe primary motivation back in the day (this changed in edgy (October 2006)), was a specific brand of laptop whose cdrom and harddrive switched places based on whether it was in its docking station or not.20:58
soren..but it turned out to solve a /lot/ of other problems (like the ones I outlined above).20:58
sorenmathiaz: I think the peercred things was the missing piece of my puzzle. Good stuff. Thanks!21:11
smosercjwatson, do you happen to be around ?21:33
cybrocopHi. I'm trying to get my laptop SD card working in Ubuntu 10.04 without any luck. Can anyone help.21:43
cybrocopThe odd thing is that when I insert the card, there are no dmesg messages printed at all.21:43
cybrocopShouldn't SOMETHING be logged in dmesg?21:44
ScottKcybrocop: This is only for server support.  Try #ubuntu.21:44
cybrocopScottK, sorry.21:44
gigasofthow to switch to another group in terminal ?21:46
cjwatsonsmoser: slightly22:07
hallynkirkland: w00t  finally, managed to live-migrate a debian qemu partition between two maverick kvm vms.22:19
kirklandhallyn: sweet!22:40
hallynmind you this had to be done with qemu.git22:40
hallynexpect 0.13.0 any day now, so hopefully not a big deal22:41
=== oubiwann is now known as oubiwann-away
=== oubiwann-away is now known as oubiwann
uvirtbotNew bug: #572123 in openvpn (main) "Openvpn 2.1_rc7 in Hardy: ifconfig-pool-persist broken" [Undecided,New] https://launchpad.net/bugs/57212323:24
mathiazjiboumans: http://people.canonical.com/~ubuntu-archive/germinate-output/ubuntu.maverick/all23:32
SpamapSmathiaz: tomorrow can we coordinate around 10:00 Pacific to collaborate on Velocity/Devopsdays trip reports a bit?23:33
mathiazSpamapS: hm - I've already published my trip report23:44
mathiazSpamapS: https://ubuntumathiaz.wordpress.com/23:44
SpamapSmathiaz: ah ok cool. :)23:44
SpamapSmathiaz: I may be agonizing too much over details then. ;)23:45
mathiazSpamapS: I haven't written anything special about devops23:45
mathiazSpamapS: yeah - I've also wondered about how much detail to put in it23:45
mathiazSpamapS: I think I wrote too much for the two blog posts23:45
mathiazSpamapS: to much verbose23:45
mathiazSpamapS: next time I may change the format to bullet points - key takeaways23:45
mathiazSpamapS: and if you wanna more, here is a link to the slides/video23:46
maekwith the limited exposure I have it seems like upstart is more dificuilt then the old servies style init.d files. am I missing something? I do stop mysql and it just sits there for ever. status mysql shows stop/post-start ? what can I read to understand this?23:46
SpamapSmaek: mysql did that with the init scripts too. ;)23:47
maekSpamapS: not really. I just re installed to 10.04 and a vinalla mysql install doesnt really stop or start correctly. and status is pretty useless :) there has to be something im missing23:47
SpamapSmaek: oh there is a specific bug, I believe, in 10.04 w/ mysql.. but I don't recall the details.23:48
maekoh no, really? wow do I look stupid. I argue for several weeks to get ubuntu over redhat because it has newer supported php and mysql and now it doesnt work. thanks for the heads up.23:49
SpamapSmaek: mysql is really important to me personally, and to Ubuntu Server in general, so if its broken, please trust that we'll fix it ASAP. :)23:51
maekSpamapS: ok, thats what I figured. if it broken its just bad timing. Im going to guess its my lack of understanding of upstart23:52
SpamapSmaek: 10.04 is really like 10.04.00 ... you *might* want to try out 10.04.1 first if you are risk-averse. ;)23:53
maekSpamapS: so since we staretd talking I did "start mysql" and its just sitting there - as root.23:54
SpamapShttps://bugs.launchpad.net/ubuntu/+source/mysql-dfsg-5.1/+bug/56673623:54
uvirtbotLaunchpad bug 566736 in mysql-dfsg-5.1 "mysqld does not start reliably..." [Low,Won't fix]23:54
SpamapSmathiaz: ahem, "Won't fix" ? Are we really going to suggest to users that they update their upstart job files?23:55
maekSpamapS: the default bind-address is 127.0.0.1 - and im not even worried about starting at startup, im having problems starting it anytime.23:56
SpamapSmaek: nothing in the logs about recovering tables or anything like that?23:57
maekSpamapS: let me check. rebooted just to see what happens after an update.23:57
SpamapSmaek: oi, I just noticed the time, I need to go... but please let me know what happens in here, I"ll check my backscroll later23:58
maekSpamapS: ok thanks.23:58

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!